Keynote | Vision of Attack Path Management and the Road Ahead | SO-CON 26
Source: YouTube · SpecterOps · published Jun 4, 2026 · 40:19
The hosts reflect on a transformative year marked by the rapid rise of AI, evolving identity threats, and the critical need to map attack paths across hybrid environments to minimize blast radius 0:17.
Key Takeaways:
• The industry faces a paradox: while new technologies like AI accelerate threats, the core security problem remains identity compromise, requiring a shift from finding vulnerabilities to mapping and cutting attack paths 0:18.
• SpecterOps emphasizes synergy between its red team, research, and product groups to ground solutions in real-world adversary tactics, ensuring tools like BloodHound reflect actual attack surfaces rather than theoretical ones 0:32.
• New capabilities include Open Graph libraries for multi-platform mapping, the release of OpenHound to simplify extension development, and the introduction of "BloodHound Century" services to help organizations maximize their tool usage and expertise 0:39.
• With AI models demonstrating improved hacking capabilities, the assumption that initial access is preventable is fading; resilience now depends on understanding the "battlefield" to identify choke points and reduce the impact of inevitable breaches 1:15.
The presentation concludes with a call to action for the community to engage with BloodHound Enterprise and open-source tools to visualize and secure complex, expanding attack surfaces.
Sources:
- 0:00 Introductions and year in review
- 0:18 The "same problem, new tech" paradox
- 0:32 SpecterOps synergy and adversary perspective
- [0:39](https://www.youtube.com/watch?v=z2QSsu
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Um, I'm Justin Kohler. >> I'm Robbie Winchester. >> I'm Jared Atkinson. >> And uh, we'll talk to you a little bit about where we're headed next year and a little bit about what we saw uh, last year and uh, yeah, excited to get started. >> Yeah, so uh, it's been a year. Pretty crazy. I I think in some of the conversations we've had already in the last couple of days, in the last week, there's been, you know, interesting new releases. Uh, there's something I Have you heard of AI? That's uh, becoming popular. It's crazy. Um, there's been a lot of a lot of changes over the last year. We've seen a lot of of new technology, rise of new technology, interest in new things. Um, you know, a lot of prevalence and conversation around what is what is the future look like? What does security look like? …